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Abstract 


This document introduces a simple mechanism to associate policies with a group of Label 
Switched Paths (LSPs) via an extension to the Path Computation Element Communication 
Protocol (PCEP). The extension allows a PCEP speaker to advertise to a PCEP peer that a 
particular LSP belongs to a particular Policy Association Group (PAG). 
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1. Introduction 


[RFC5440] describes the Path Computation Element Communication Protocol (PCEP), which 
enables the communication between a Path Computation Client (PCC) and a Path Control 
Element (PCE) or between two PCEs based on the PCE architecture [RFC4655]. [RFC5394] provides 
additional details on policy within the PCE architecture and also provides context for the support 
of PCE policy. 


"Path Computation Element Communication Protocol (PCEP) Extensions for Stateful PCE" 
([RFC8231]) describes a set of extensions to PCEP to enable active control of Multiprotocol Label 
Switching Traffic Engineering (MPLS-TE) and Generalized MPLS (GMPLS) tunnels. [RFC8281] 
describes the setup and teardown of PCE-initiated LSPs under the active stateful PCE model 
without the need for local configuration on the PCC, thus allowing for a dynamic network. 
Currently, the LSPs can either be signaled via Resource Reservation Protocol Traffic Engineering 
(RSVP-TE) or segment routed as specified in [RFC8664]. 


[RFC8697] introduces a generic mechanism to create a grouping of LSPs that can then be used to 
define associations between a set of LSPs and a set of attributes (such as configuration 
parameters or behaviors) and is equally applicable to stateful PCE (active and passive modes) 
and stateless PCE. 


This document specifies a PCEP extension to associate one or more LSPs with policies using the 
generic association mechanism. 


A PCEP speaker may want to influence the PCEP peer with respect to path selection and other 
policies. This document describes a PCEP extension to associate policies by creating a Policy 
Association Group (PAG) and encoding this association in PCEP messages. The specification is 
applicable to both stateful and stateless PCEP sessions. 


Note that the actual policy definition and the associated parameters are out of scope of this 
document. 


1.1. Requirements Language 


The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD 
NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to 
be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in 
all capitals, as shown here. 
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2. Terminology 


The following terminology is used in this document. 


Association parameters: As described in [RFC8697], the combination of the mandatory fields 
Association Type, Association ID, and Association Source in the ASSOCIATION object uniquely 
identifies the association group. If the optional TLVs -- Global Association Source or Extended 
Association ID -- are included, then they are included in combination with mandatory fields to 
uniquely identify the association group. 


Association information: As described in [RFC8697], the ASSOCIATION object could include 
other optional TLVs based on the Association Types that provide "information" related to the 
association. 


LSR: LabelSwitching Router 

MPLS: Multiprotocol Label Switching 
PAG: Policy Association Group 

PAT: Policy Association Type 


PCC: Path Computation Client; any client application requesting a path computation to be 
performed by a Path Computation Element. 


PCE: Path Computation Element; an entity (component, application, or network node) that is 
capable of computing a network path or route based on a network graph and applying 
computational constraints. 


PCEP: Path Computation Element Communication Protocol 


3. Motivation 


Paths computed using PCE can be subjected to various policies at both the PCE and the PCC. For 
example, in a centralized TE scenario, network operators may instantiate LSPs and specify 
policies for traffic accounting, path monitoring, telemetry, etc., for some LSPs via the stateful PCE. 
Similarly, a PCC could request a user-specific or service-specific policy to be applied at the PCE, 
such as a constraints relaxation policy, to meet optimal QoS and resiliency levels. 


PCEP speakers can use the generic mechanism of [RFC8697] to associate a set of LSPs with a 
policy, without the need to know the details of such a policy. This simplifies network operations, 
avoids frequent software upgrades, and provides the ability to introduce new policies more 
quickly. 
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Figure 1: Sample Use Cases for Carrying Policies over PCEP 


3.1. Policy-Based Constraints 


In the context of a policy-enabled path computation framework [RFC5394], path computation 
policies may be applied at a PCC, a PCE, or both. A Label Switching Router (LSR) with a policy- 
enabled PCC can receive: 


* A service request via signaling, including over a Network-Network Interface (NNI) or User- 
Network Interface (UNT) reference point. 


* A configuration request over a management interface to establish a service. 


The PCC may apply user-specific or service-specific policies to decide how the path selection 
process should be constrained -- that is, which constraints, diversities, optimization criteria, and 
constraint-relaxation strategies should be applied to increase the likelihood that the service LSP 
(s) will be successfully established and will provide the necessary QoS and resilience against 
network failures. The user-specific or service-specific policies are applied to the PCC and are then 
passed to the PCE along with the path computation request in the form of constraints [RFC5394]. 


The PCEP speaker can use the generic mechanism as per [RFC8697] to associate a set of LSPs with 
user-specific or service-specific policies. This would simplify the path computation message 
exchanges in PCEP. 
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4. Overview 


As per [RFC8697], LSPs are associated with other LSPs with which they interact by adding them 
to a common association group. Grouping can also be used to define the association between 
LSPs and the policies associated with them. As described in [RFC8697], the association group is 
uniquely identified by the combination of the following fields in the ASSOCIATION object: 
Association Type, Association ID, Association Source, and (if present) Global Association Source 
or Extended Association ID. This document defines a new Association Type called "Policy 
Association" with value 3 based on the generic ASSOCIATION object. This new Association Type is 
called "Policy Association Type" (PAT). 


[RFC8697] specifies the mechanism for the capability advertisement of the Association Types 
supported by a PCEP speaker by defining an ASSOC-Type-List TLV to be carried within an OPEN 
object. This capability exchange for the PAT MUST be done before using the Policy Association. 
Thus, the PCEP speaker MUST include the PAT in the ASSOC-Type-List TLV and MUST receive the 
same from the PCEP peer before using the PAG in PCEP messages. 


The Policy Association Type (3) is operator configured (as specified in [RFC8697]), i.e., the 
association is created by the operator manually on the PCEP peers, and an LSP belonging to this 
association is conveyed via PCEP messages to the PCEP peer. There is no need to convey an 
explicit Operator-configured Association Range, which could only serve to artificially limit the 
available Association IDs. Thus, for the Policy Association Type, the Operator-configured 
Association Range MUST NOT be set and MUST be ignored if received. 


A PAG can have one or more LSPs. The association parameters including Association Identifier, 
Policy Association Type (PAT), as well as the Association Source IP address are manually 
configured by the operator and are used to identify the PAG as described in [RFC8697]. The 
Global Association Source and Extended Association ID MAY also be included. 


As per the processing rules specified in Section 6.4 of [RFC8697], if a PCEP speaker does not 
support this Policy Association Type, it would return a PCEP error (PCErr) message with Error- 
Type 26 "Association Error" and Error-value 1 "Association type is not supported". The PAG and 
the policy MUST be configured on the PCEP peers as per the operator-configured association 
procedures. All further processing is as per Section 6.4 of [RFC8697]. If a PCE speaker receives a 
PAG in a PCEP message and the Policy Association information is not configured, it MUST return a 
PCErr message with Error-Type 26 "Association Error" and Error-value 4 "Association unknown". 


Associating a particular LSP with multiple policy groups is allowed from a protocol perspective; 
however, there is no assurance that the PCEP speaker will be able to apply multiple policies. If a 
PCEP speaker does not support handling of multiple policies for an LSP, it MUST NOT add the LSP 
into the association group and MUST return a PCErr with Error-Type 26 "Association Error" and 
Error-value 7 "Cannot join the association group". 
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5. Policy Association Group 


Association groups and their memberships are defined using the ASSOCIATION object defined in 
[RFC8697]. Two object types for IPv4 and IPv6 are defined. The ASSOCIATION object includes 
"Association type" indicating the type of the association group. This document adds a new 
Association Type, Policy Association Type (PAT). 


PAG may carry optional TLVs including but not limited to: 


POLICY-PARAMETERS-TLV: 
Used to communicate opaque information useful to applying the policy, described in Section 
51: 


VENDOR-INFORMATION-TLV: 
Used to communicate arbitrary vendor-specific behavioral information, described in 
[RFC7470]. 


5.1. POLICY-PARAMETERS-TLV 


The ASSOCIATION object (for PAT) can carry an optional POLICY-PARAMETERS-TLV with opaque 
information that is needed to apply the policy at the PCEP peer. In some cases, to apply a PCE 
policy successfully, it is required to also associate some policy parameters that need to be 
evaluated. This TLV is used to carry those policy parameters. The TLV could include one or more 
policy-related parameters. The encoding format and the order MUST be known to the PCEP peers; 
this could be done during the configuration of the policy (and its association parameters) for the 
PAG. The TLV format is as per the format of the PCEP TLVs, as defined in [RFC5440] and shown in 
Figure 2. Only one POLICY-PARAMETERS-TLV can be carried, and only the first occurrence is 
processed. Any others MUST be ignored. 


0 1 2 3 
012345678901234567890123456780901 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 
| Type-48 | Length | 
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ 


jl Policy Parameters Hal 


Figure 2: The POLICY-PARAMETERS-TLV Format 


The POLICY-PARAMETERS-TLV type is 48, and it has a variable length. The Value field is variable 
and padded to a 4-byte alignment; padding is not included in the Length field. The PCEP peer 
implementation needs to be aware of the encoding format, order, and meaning of the policy 
parameters well in advance based on the policy. Note that from the protocol point of view, this 
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data is opaque and can be used to carry parameters in any format understood by the PCEP peers 
and associated with the policy. The exact use of this TLV is beyond the scope of this document. 
Examples are included for illustration purposes in Appendix A. 


If the PCEP peer is unaware of the policy parameters associated with the policy and it receives 
the POLICY-PARAMETERS-TLV, it MUST reject the PCEP message and send a PCErr message with 
Error-Type 26 "Association Error" and Error-value 12 "Not expecting policy parameters". Further, 
if at least one parameter in the POLICY-PARAMETERS-TLV received by the PCEP speaker is 
considered unacceptable in the context of the associated policy (e.g., out of range value, badly 
encoded value, etc.), the PCEP speaker MUST reject the PCEP message and send a PCErr message 
with Error-Type 26 "Association Error" and Error-value 13 "Unacceptable policy parameters". 


Note that the vendor-specific behavioral information is encoded in the VENDOR-INFORMATION- 
TLV, which can be used along with this TLV. 


6. Security Considerations 


The security considerations described in [RFC8697], [RFC8231], [RFC5394], and [RFC5440] apply 
to the extensions described in this document as well. In particular, a malicious PCEP speaker 
could be spoofed and used as an attack vector by creating spurious Policy Associations as 
described in [RFC8697]. Further, as described in [RFC8697], a spurious LSP can have policies that 
are inconsistent with those of the legitimate LSPs of the group and, thus, cause problems in the 
handling of the policy for the legitimate LSPs. It should be noted that Policy Association could 
provide an adversary with the opportunity to eavesdrop on the relationship between the LSPs. 
[RFC8697] suggests that the implementations and operators use indirect values as a way to hide 
any sensitive business relationships. Thus, securing the PCEP session using Transport Layer 
Security (TLS) [RFC8253], as per the recommendations and best current practices in BCP 195 
[RFC7525], is RECOMMENDED. 


Further, extra care needs to be taken by the implementation with respect to the POLICY- 
PARAMETERS-TLV while decoding, verifying, and applying these policy variables. This TLV 
parsing could be exploited by an attacker; thus, extra care must be taken while configuring a 
Policy Association that uses the POLICY-PARAMETERS-TLV and making sure that the data is easy 
to parse and verify before use. Ensuring agreement among all relevant PCEP peers as to the 
format and layout of the policy parameters information is key for correct operations. Note that 
the parser for POLICY-PARAMETERS-TLV is particularly sensitive since it is opaque to PCEP and 
can be used to convey data with many different internal structures/formats. The choice of 
decoder is dependent on the additional metadata associated with the policy; thus, additional risk 
of using a wrong decoder and getting garbage results is incurred. Using standard and well- 
known policy formats could help alleviate those risks. 
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7. IANA Considerations 


7.1. ASSOCIATION Object Type Indicators 


This document defines a new Association Type in the subregistry "ASSOCIATION Type Field" of 
the "Path Computation Element Protocol (PCEP) Numbers" registry that was originally defined in 
[RFC8697]. 


Value Name Reference 
3 Policy Association RFC 9005 
Table 1 


7.2. PCEP TLV Type Indicators 


The following TLV Type Indicator value has been registered within the "PCEP TLV Type 
Indicators" subregistry of the "Path Computation Element Protocol (PCEP) Numbers" registry. 


Value Description Reference 
48 POLICY-PARAMETERS-TLV RFC 9005 
Table 2 


7.3. PCEP Errors 


This document defines new Error-values for Error-Type 26 "Association Error" defined in 
[RFC8697]. IANA has allocated new error values within the "PCEP-ERROR Object Error Types and 
Values" subregistry of the "Path Computation Element Protocol (PCEP) Numbers" registry as 
follows: 


Error-Type Meaning Error-value Reference 
26 Association Error [RFC8697] 
12: Not expecting policy parameters RFC 9005 


13: Unacceptable policy parameters RFC 9005 
Table 3 
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8. Manageability Considerations 


8.1. Control of Function and Policy 


An operator MUST be allowed to configure the Policy Associations at PCEP peers and associate 
them with the LSPs. They MAY also allow configuration to related policy parameters and provide 
information on the encoding format and order to parse the associated POLICY-PARAMETERS-TLV. 


8.2. Information and Data Models 
[RFC7420] describes the PCEP MIB; there are no new MIB objects for this document. 


The PCEP YANG module is defined in [PCE-PCEP-YANG]. That module supports associations as 
defined in [RFC8697]; thus, it supports the Policy Association Groups. 


An implementation SHOULD allow the operator to view the PAG configured. Further 
implementation SHOULD allow one to view associations reported by each peer and the current 
set of LSPs in the PAG. 


8.3. Liveness Detection and Monitoring 


The mechanisms defined in this document do not imply any new liveness detection and 
monitoring requirements in addition to those already listed in [RFC5440] and [RFC8231]. 


8.4. Verifying Correct Operations 


Verifying the correct operation of a policy can be performed by monitoring various parameters 
as described in [RFC5440] and [RFC8231]. A PCEP implementation SHOULD provide information 
on failed path computation due to applying policy and log error events, e.g., parsing failure for a 
POLICY-PARAMETERS-TLV. 


8.5. Requirements on Other Protocols 


The mechanisms defined in this document do not imply any new requirements on other 
protocols. 


8.6. Impact on Network Operations 


The mechanisms defined in this document do not have any impact on network operations in 
addition to those already listed in [RFC5440], [RFC8231], and [RFC8281]. 
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Appendix A. Example of Policy Parameters 


An example could be a monitoring and telemetry policy, P1, that is dependent on a profile 
(GOLD/SILVER/BRONZE) as set by the operator. The PCEP peers need to be aware of policy P1 
(and its associated characteristics) in advance as well the fact that the policy parameter will 
encode the profile of a type string in the POLICY-PARAMETERS-TLV. As an example, LSP1 could 
encode the PAG with the POLICY-PARAMETERS-TLV using the string "GOLD". 


The following is another example where the path computation at the PCE could be dependent on 
when the LSP was configured at the PCC. For such a policy, P2, the timestamp can be encoded in 
the POLICY-PARAMETERS-TLV, and the exact encoding could be the 64-bit timestamp format as 
defined in [RFC5905]. 


While the above example has a single field in the POLICY-PARAMETERS-TLY, it is possible to 
include multiple fields, but the exact order, encoding format, and meanings need to be known in 
advance at the PCEP peers. 
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